Install and configure cron-apt for automatic package updates. Use it in combination with a module to manage APT like: puppetlabs-apt
Available on PuppetForge as ''mniedzielski-cronapt'.
include apt
# Let cron-apt update packages on demand.
class { 'cronapt::configure':
actions => ['update', 'upgrade', 'notify'],
mail_on => 'output',
}
actions { update, download, upgrade, notify }
mail_on { error, upgrade, changes, output, always }
mail <a valid email address>
This example provides full hands-off automatic updates of packages. Don't be scared.